CVE Tools
Sign in

CVE-2010-0840

Published: Apr 1, 2010Updated: Apr 21, 2026 Sources: CVE List NVD BDUNVD-CWE-noinfo
9.8CRITICAL
NVD MITRE
EPSS Score
96.3%
Top 0.1%
CISA KEV
Active Exploitation
Since May 25, 2022
Exploits
No Known Exploits
Remediation
Patch Available
Self-Check
OpenVAS

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."

No summary for this CVE yet.

CVSS Vector Breakdown

AV:NAC:LPR:NUI:NS:UC:HI:HA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

NVD-CWE-noinfo

Affected Products

Oracle Corp.
commercial·USaka oracle
Java Runtime EnvironmentLibraryLibrary
OSS Libraries / generic-library
jreLibrary
OSS Libraries / generic-library
Canonical Ltd.
commercial·GBaka canonical
UbuntuOn-premOS
Operating Systems / linux-distro
opensuse
oss-project·DE
opensuseOn-premOS
Operating Systems / linux-distro
and 2 more affected products View all →

Exploitability

CISA Known Exploited Vulnerability
Added to KEV:May 25, 2022
Remediation due:Jun 15, 2022

Required action: Apply updates per vendor instructions.

Official Patch Available
Is your org exposed to CVE-2010-0840?Request an assessment to establish which checks are appropriate for your systems. Check my exposure

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa.gov
https://vuldb.com/ru/?id.52524
vuldb.com
http://ubuntu.com/usn/usn-923-1
ubuntu.com
and 41 more references View all →

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2010-0840 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows